Spectrum, How to solve this type of VNM alarm? "INSUFFICIENT USER SECURITY FOR MODEL PLACEMENT "

[Eduardo Ignacio Serrano]

I have a DSS Spectrum 10.4.1 environment, According to your experience I have the MLS and Secondary Spectrum server, but which generates too many alarms in the SS in their respective VNMs, the title of the alarm is "INSUFFICIENT USER SECURITY FOR MODEL PLACEMENT ", in the detail of the alarm comes the description and check the possible solutions or actions to take" A user with WRITE permission on the container model can cut this model from it's current location and paste it into the container model. ", I don't understand how to solve this alarm., Symptoms "This model could not be placed in the appropriate IP-logical container", I really don't know where to start fixing the problem, does the Specuser user have an error?


I await your valuable opinion, I am grateful for your support.

Kind regards.

[Raphael Franck]

Hi Eduardo,

you might want to check a few things:
- are you trying to cut/paste models from one container into another?
- did you check the Security_String value on the destination container and make sure, that your user account has write privileges for this (look for security community on the respective user group)
- did you check the underlying event that causes the alarm? by default he event, that can be seen in the grey background section of the alarm details "For model ... of type VNM, SPECTRUM has resolved all hosts in the .hostrc file" is genereated on the VNM model periodically due to Spectrum performing exactly this step. But in contrast to your situation, normally no alarm is configured for this. So maybe someone just (accidently) configured some event to alarm mapping?

regards,

Raphael

[Eduardo Ignacio Serrano]

Hi, Dear Raphael

Thanks for the answer, it helped me a lot to solve the problem, the alarm is disabled by default you are correct, but I have a question on the subject, so the alarm is generated when the spectrumS is not resolved other Spectrums hosts ? Or when does it resolve the hosts of other Spectrums?, since the alarm if it confuses me what it wants to inform you, I agree that in the symptoms if it informs you of the lack of user permissions, but if it confuses me that the event combines it with these two actions of the resolution of the .hostrc file and with the user permissions, but thank you very much, dear, your answer was very helpful.

buddy have a great day

[Raphael Franck]

Hi Eduardo,

the event (not alarm) you're seeing basically tells, that Spectrum was able to resolve all entries from the .hostrc file properly. This is a good thing and happens on a regular basis. If Spectrum would not be able to resolve entries (e.g. in case where you have ip addresses in the .hostrc file but no name resolution), then the event would look different. Given the information you provided I would recommend to remove the alarm mapping for this event type but still check on the other items I mentioned in the first response.

hope this helps,
Raphael